Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
libtpms returns wrong initialization vector when certain symmetric ciphers are used
Vulnerability Description
libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
使用已被攻破或存在风险的密码学算法
Vulnerability Title
libtpms 安全特征问题漏洞
Vulnerability Description
libtpms是Stefan Berger个人开发者的一个可信平台模块的软件仿真。 libtpms 0.10.0版本和0.10.1版本存在安全特征问题漏洞，该漏洞源于返回初始化向量不当，可能削弱后续加密和解密步骤，影响数据机密性。
CVSS Information
N/A
Vulnerability Type
N/A